11 October 2017

mata api

mandian: 46% incedent , tiada malware di install.

100% attack, curi credential


Attack lifecylce:
-Initial Recon
-Initial Compromise(laptop, end user device)
-Establish Foothold
-Escalate Privileges
-Internal Recon
-Complete Mission(data theft) (disini baru ada bussiness impact.)

Prevention:
-Malware problem
-Endpoint EPP
-Tactical Intellgigence
-MSSP

Detection Breach
-First Atack, usually malware, tapi lepas breach, human attacker.
- Endpont Detection and Response(EDR)
- Operational Threat Intellignence
-MDR, Manage Detection and REsponse




Fin7
mimikatz
gizmodo
doubleagent

14 September 2017

php://input

Actually php://input allows you to read raw POST data.

php://input is not available with enctype="multipart/form-data".





So, if you simply POST a good old HTML form, the request looks something like this:
POST /page.php HTTP/1.1

key1=value1&key2=value2&key3=value3



request with a JSON-payload would look something like this:
POST /page.php HTTP/1.1

{"key1":"value1","key2":"value2","key3":"value3"}
The content would now be application/json (or at least none of the above mentioned), so PHP's $_POST-wrapper doesn't know how to handle that (yet).
The data is still there, you just can't access it through the wrapper($_POST). So you need to fetch it yourself in raw format with file_get_contents('php://input') (as long as it's not multipart/form-data-encoded).




ref:  https://stackoverflow.com/questions/8893574/php-php-input-vs-post

13 September 2017

Thunderbird baca Microsoft Exchange

EWS_URL
   https:///EWS/Exchange.asmx

vpn vs mtu

Kadang-kadang akan ada masalah dengan vpn. Contoh website boleh dibuka dari host Windows, tapi tak boleh dari ubuntu.

Salah satu penyebab adalah size MTU(Max Transfer Unit)

Secara asal, MTU utk host Windows adalah 1300, manakala ubuntu 17 pula adalah 1500.

Cara nak kecilkan saiz mtu dalam linux

# ifconfig mtu 1300




Simtom kes di atas, bila TLS Handshake  tersangkut masa Server Hello(no 'Server Finish')

11 September 2017

BitCoin ... Blockchain

Bitcoin:
https://www.youtube.com/watch?v=l9jOJk30eQs



BlockChain
https://youtu.be/_160oMzblY8